Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
File: XNaRDPHi4rHKNHPEt9CSAg57fGE.mft (raw, json)
Hash identifier: Z5gUpD39iNE2ILRXTfiaV0wiGAFAAP5PSuVMITr/Sw0=
Subject key identifier: 88:9A:A0:72:21:B5:EA:B8:57:54:43:68:8B:DC:24:02:66:75:A3:1F
Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Certificate serial: 0196C04ABC23081B6021B01EE1C37CD32CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
Manifest number: 14C6
Signing time: Sun 11 May 2025 17:00:45 +0000
Manifest this update: Sun 11 May 2025 17:00:45 +0000
Manifest next update: Mon 12 May 2025 17:00:45 +0000
Files and hashes: 1: XNaRDPHi4rHKNHPEt9CSAg57fGE.crl (hash: wwj4g54TgBLHP4/7eYFgiHs2qBBd4EjlEB6xNCx6POY=)
2: uWnagnV7ph6W305lDhQcUtu8iOA.roa (hash: O2rllaolJLmB6wHK4WL6QTUawzuqbXsQObcxgCsZ0L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:bc:23:08:1b:60:21:b0:1e:e1:c3:7c:d3:2c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Validity
Not Before: May 11 17:00:45 2025 GMT
Not After : May 12 17:00:45 2025 GMT
Subject: CN=889aa07221b5eab8575443688bdc24026675a31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:42:61:55:43:91:d5:cd:3b:83:9f:c3:f1:78:
43:7f:e2:84:63:dc:16:6a:04:30:7a:92:3b:df:e4:
3d:ff:5a:77:53:05:f7:e3:06:a2:ff:2b:32:19:35:
95:14:b4:6b:63:32:81:11:e0:02:2c:50:ed:a1:19:
da:fb:da:33:3c:82:db:ff:fe:0d:e2:b5:8c:12:60:
e2:22:d1:04:fb:36:69:83:70:78:c6:97:82:53:e7:
77:2c:8c:7c:80:df:88:c2:32:c2:77:c7:33:10:c6:
25:85:f1:43:1a:d0:41:49:53:65:42:12:88:4c:d6:
8e:8c:56:68:fc:cb:da:ed:0d:a3:77:ce:f8:da:ed:
47:24:44:6b:75:30:eb:68:c5:6f:46:c8:1d:8b:55:
7a:ec:73:c8:3b:81:40:e3:bf:50:85:6f:ef:e3:9a:
00:e4:10:21:b4:cb:ce:6a:af:96:11:f4:2e:52:37:
e2:f9:a6:5c:3c:fc:b0:0d:58:e3:ad:94:89:8c:c6:
a1:13:03:90:3d:89:a0:e0:ec:f3:e7:98:72:e3:a3:
77:f6:8b:60:01:46:49:03:ea:5d:09:5c:3b:af:0d:
98:87:fa:27:7a:d0:91:3d:41:68:b0:3b:58:b1:cc:
48:72:b2:c8:49:57:2d:d5:3d:bb:12:19:1f:92:f7:
4d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9A:A0:72:21:B5:EA:B8:57:54:43:68:8B:DC:24:02:66:75:A3:1F
X509v3 Authority Key Identifier:
keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:bf:77:40:d1:c8:68:a2:2a:5d:b6:10:1c:bd:af:bf:44:12:
d3:6d:73:5d:25:98:ca:e2:5a:d2:74:32:0d:7a:69:87:55:85:
18:a5:7e:f0:95:1b:11:91:65:0b:1d:3a:0f:49:fb:10:60:12:
88:71:b9:13:1b:7f:c5:44:d9:4f:36:e2:66:78:38:18:d8:ec:
24:59:a0:b4:b2:d9:dc:26:1a:63:2f:ae:0c:35:31:bd:3d:9b:
22:cd:bf:f3:f4:af:70:04:c4:72:f7:14:e2:50:81:40:02:cf:
f9:fd:59:34:f5:2e:dd:82:f3:05:05:03:39:7c:38:ce:85:0d:
e7:e8:70:f1:fc:c5:28:e2:2f:2f:36:12:1d:40:70:c7:05:ac:
05:b8:a3:50:c1:16:0b:d2:6c:c0:5a:92:d9:27:5a:e2:59:85:
13:14:84:2c:64:f6:13:e8:85:ad:80:ac:ab:33:80:83:1b:44:
ec:7d:12:3d:86:6c:f8:e0:5f:17:da:59:49:3b:86:13:3c:02:
43:28:de:a0:99:04:06:a0:70:cc:0f:8e:fa:c8:08:16:c9:92:
91:e0:3e:b8:e8:72:6d:29:63:fa:16:b6:b0:ac:2d:19:42:70:
c5:89:33:00:7f:5a:2d:87:2c:6b:17:39:2e:50:83:22:3a:25:
d4:9a:c7:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbASrwjCBtgIbAe4cN80yzTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZDY5MTBjZjFlMmUyYjFjYTM0NzNjNGI3ZDA5MjAyMGU3
YjdjNjEwHhcNMjUwNTExMTcwMDQ1WhcNMjUwNTEyMTcwMDQ1WjAzMTEwLwYDVQQD
Eyg4ODlhYTA3MjIxYjVlYWI4NTc1NDQzNjg4YmRjMjQwMjY2NzVhMzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokJhVUOR1c07g5/D8XhDf+KEY9wW
agQwepI73+Q9/1p3UwX34wai/ysyGTWVFLRrYzKBEeACLFDtoRna+9ozPILb//4N
4rWMEmDiItEE+zZpg3B4xpeCU+d3LIx8gN+IwjLCd8czEMYlhfFDGtBBSVNlQhKI
TNaOjFZo/Mva7Q2jd8742u1HJERrdTDraMVvRsgdi1V67HPIO4FA479QhW/v45oA
5BAhtMvOaq+WEfQuUjfi+aZcPPywDVjjrZSJjMahEwOQPYmg4Ozz55hy46N39otg
AUZJA+pdCVw7rw2Yh/onetCRPUFosDtYscxIcrLISVct1T27EhkfkvdNuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIiaoHIhteq4V1RDaIvcJAJmdaMfMB8GA1UdIwQY
MBaAFFzWkQzx4uKxyjRzxLfQkgIOe3xhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE5hUkRQSGk0ckhLTkhQRXQ5Q1NBZzU3ZkdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xZDJiODctMGRlMy00ZjkzLWFkNjQt
MTcyYzYwYjNlMzZkLzEvWE5hUkRQSGk0ckhLTkhQRXQ5Q1NBZzU3ZkdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8xZDJiODctMGRlMy00ZjkzLWFkNjQtMTcyYzYwYjNlMzZk
LzEvWE5hUkRQSGk0ckhLTkhQRXQ5Q1NBZzU3ZkdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeb93QNHI
aKIqXbYQHL2vv0QS021zXSWYyuJa0nQyDXpph1WFGKV+8JUbEZFlCx06D0n7EGAS
iHG5Ext/xUTZTzbiZng4GNjsJFmgtLLZ3CYaYy+uDDUxvT2bIs2/8/SvcATEcvcU
4lCBQALP+f1ZNPUu3YLzBQUDOXw4zoUN5+hw8fzFKOIvLzYSHUBwxwWsBbijUMEW
C9JswFqS2Sda4lmFExSELGT2E+iFrYCsqzOAgxtE7H0SPYZs+OBfF9pZSTuGEzwC
QyjeoJkEBqBwzA+O+sgIFsmSkeA+uOhybSlj+ha2sKwtGUJwxYkzAH9aLYcsaxc5
LlCDIjol1JrHGQ==
-----END CERTIFICATE-----
Generated at Sun May 11 23:10:27 2025 by rpki-client